In this section, learn about end to end user flow for Desktop Signing.


  1. Create a Certification Profile
  2. Create a Service Plan
  3. Create an Enterprise & configure Service Plan to it
  4. Create a new role and assign profiles to the role
  5. Create a Desktop Signing account on ADSS Web RA Web Portal
  6. Create a Desktop Signing certificate


Desktop Signing facilitates to register user ID and provides the capability to manage its certificates keys. This certificate can be used for Advanced Electronic Signature, for the following purposes:


  • Document Signing
  • Attribute Authority 
  • Certificate/CRL Signing
  • Code Signing
  • Document Encryption 
  • DRM Agent 
  • Email Signing 
  • IP Sec
  • Log Signing
  • MSSP request Signing 
  • OCSP request Signing 
  • OCSP Response Signing 
  • Qualified Certificate 
  • Rights Issuer
  • SCVP Request Signing 
  • SCVP Response Signing
  • TLS Client Authentication 
  • TLS Server Authentication 
  • Timestamp Response Signing 
  • Verification Response Signing 
  • XKMS Request Signing 
  • XKMS Response Signing 


A certificate request can be for issuance/approval, renewal and revocation.


Create a Certification Profile


A certification profile is created in ADSS Web RA to configure ADSS Profiles (Certification and/or CSP) to issue different types of certificates for the ADSS Web RA users. In other words, a certification profile (Certification and/or CSP) is actually created in the ADSS Server, and it is used in the ADSS Web RA Admin for its implication.


Certification profiles entail all complex configurations and business requirements (i.e. CA details, Key Algorithm, Validity, etc.) to issue corresponding certificates for the ADSS Web RA users.